iam:UpdateOpenIDConnectProviderThumbprint

Write

iam:UpdateOpenIDConnectProviderThumbprint is a Write access-level action in the iam service. Grants permission to update the entire list of server certificate thumbprints that are associated with an OpenID Connect (OIDC) provider resource

Resource types

ARNs that iam:UpdateOpenIDConnectProviderThumbprint can be scoped to in an IAM policy.

arn:${Partition}:iam::${Account}:oidc-provider/${OidcProviderName}
oidc-provider

Condition keys

Keys you can use in the Condition block of a policy that grants iam:UpdateOpenIDConnectProviderThumbprint.

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows iam:UpdateOpenIDConnectProviderThumbprint. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowIamUpdateOpenIDConnectProviderThumbprint",
      "Effect": "Allow",
      "Action": "iam:UpdateOpenIDConnectProviderThumbprint",
      "Resource": "*"
    }
  ]
}

Related actions in iam

iam:AcceptDelegationRequest Write iam:AddClientIDToOpenIDConnectProvider Write iam:AddRoleToInstanceProfile Write iam:AddUserToGroup Write iam:AssociateDelegationRequest Write iam:AttachGroupPolicy Permissions management iam:AttachRolePolicy Permissions management iam:AttachUserPolicy Permissions management iam:ChangePassword Write iam:CreateAccessKey Write iam:CreateAccountAlias Write iam:CreateDelegationRequest Write

View all iam actions →